I think I'm going to go for Bobbies suggestion. It seems the easiest to implement
Quick question though, would any of my previous ideas work? * Check the form was actually submitted from within the site? Perhaps via CGI. although I'm sure that may have issues as well. * A field that checks when loaded vs submit time? Are the spam bots the submit bots, or is there a delay between the two. * The scriptProtect function in Application.cfc? Is this applciable ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting, up-to-date ColdFusion information by your peers, delivered to your door four times a year. http://www.fusionauthority.com/quarterly Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:260405 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
